cylc-uiserver (0.3.0), ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2026-54338 via jupyterhub (1.3.0)

jupyterhub PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.3.0 - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...